0f85e96c0d8a2aaa7f078aa7269edfcadc861e55c2332afb5376034ce82227c5

Analysis

max time kernel
182s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-10-2022 23:40

Target

0f85e96c0d8a2aaa7f078aa7269edfcadc861e55c2332afb5376034ce82227c5.exe
Size

447KB
MD5

909cb28a414182c9809963f977abe034
SHA1

d2cbc963187c5470c0ea939ae8cb40dff852de7c
SHA256

0f85e96c0d8a2aaa7f078aa7269edfcadc861e55c2332afb5376034ce82227c5
SHA512

e172c96adee84c64416d90512312f0cb1280f56fb8ef3d6176af18899b7515d2462c8241b715d504a7cc68570b2486259607dbbbaf1bd309e77ebb64aba4d969
SSDEEP

6144:y90XjJgmx9jfumGiKW+s+9H/WdLb9lJ9uEnzW7XRZSOOeJ:ymGHJDfuX939uzfSO

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1504-132-0x0000000001000000-0x0000000001098000-memory.dmp	upx
behavioral2/memory/1504-133-0x0000000001000000-0x0000000001098000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4812	1504	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\0f85e96c0d8a2aaa7f078aa7269edfcadc861e55c2332afb5376034ce82227c5.exe
"C:\Users\Admin\AppData\Local\Temp\0f85e96c0d8a2aaa7f078aa7269edfcadc861e55c2332afb5376034ce82227c5.exe"
1⤵
PID:1504
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1504 -s 464
  2⤵
  - Program crash
  PID:4812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1504 -ip 1504
1⤵
PID:4804

memory/1504-132-0x0000000001000000-0x0000000001098000-memory.dmp

Filesize
608KB

Download
memory/1504-133-0x0000000001000000-0x0000000001098000-memory.dmp

Filesize
608KB

Download